last executing test programs: 2.79864734s ago: executing program 0 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.76284672s ago: executing program 0 (id=774): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.617828402s ago: executing program 0 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.542942073s ago: executing program 0 (id=784): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.546439477s ago: executing program 3 (id=807): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.544610628s ago: executing program 3 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.433411199s ago: executing program 3 (id=809): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 1.35696328s ago: executing program 3 (id=810): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.319378871s ago: executing program 4 (id=813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) shutdown(r0, 0x1) 1.249300232s ago: executing program 2 (id=815): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.053541205s ago: executing program 4 (id=817): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) splice(r1, 0x0, r2, 0x0, 0x200002, 0x800000000000000) 975.665716ms ago: executing program 2 (id=818): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 868.886267ms ago: executing program 1 (id=820): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000000)="ce", 0x1}], 0x1}}], 0x2, 0x810) r3 = dup(r0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 868.508787ms ago: executing program 1 (id=821): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r0}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 864.963057ms ago: executing program 2 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 807.133898ms ago: executing program 1 (id=823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) 779.380179ms ago: executing program 1 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1750, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 778.392789ms ago: executing program 2 (id=835): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r0}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 607.017351ms ago: executing program 1 (id=826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 604.717821ms ago: executing program 2 (id=837): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) getegid() personality(0x2000000) 528.307673ms ago: executing program 3 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x76}, 0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 461.247214ms ago: executing program 2 (id=828): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 251.067886ms ago: executing program 0 (id=829): r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = dup(r1) inotify_rm_watch(r3, r2) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)={0x40002013}) 196.562737ms ago: executing program 3 (id=830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) 195.824297ms ago: executing program 4 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 121.059238ms ago: executing program 0 (id=831): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x0, &(0x7f00000001c0)}) set_mempolicy(0x3, &(0x7f0000000040)=0xf, 0x6) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 116.134158ms ago: executing program 4 (id=832): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 71.219669ms ago: executing program 4 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 28.927699ms ago: executing program 4 (id=834): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x0, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) close(r0) 0s ago: executing program 1 (id=836): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. [ 34.982098][ T29] audit: type=1400 audit(1748597679.296:62): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.983228][ T3307] cgroup: Unknown subsys name 'net' [ 35.006531][ T29] audit: type=1400 audit(1748597679.296:63): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.036576][ T29] audit: type=1400 audit(1748597679.326:64): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.207668][ T3307] cgroup: Unknown subsys name 'cpuset' [ 35.214867][ T3307] cgroup: Unknown subsys name 'rlimit' [ 35.385699][ T29] audit: type=1400 audit(1748597679.696:65): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.411082][ T29] audit: type=1400 audit(1748597679.706:66): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.435822][ T29] audit: type=1400 audit(1748597679.706:67): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.459010][ T29] audit: type=1400 audit(1748597679.706:68): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.469672][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.482930][ T29] audit: type=1400 audit(1748597679.716:69): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.518706][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.520956][ T29] audit: type=1400 audit(1748597679.716:70): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.558509][ T29] audit: type=1400 audit(1748597679.806:71): avc: denied { relabelto } for pid=3311 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.780665][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.800739][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.849327][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.917008][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.929919][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.938006][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.945440][ T3318] bridge_slave_0: entered allmulticast mode [ 36.952857][ T3318] bridge_slave_0: entered promiscuous mode [ 36.974913][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.982829][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.992131][ T3317] bridge_slave_0: entered allmulticast mode [ 36.999785][ T3317] bridge_slave_0: entered promiscuous mode [ 37.007385][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.015245][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.025082][ T3318] bridge_slave_1: entered allmulticast mode [ 37.032948][ T3318] bridge_slave_1: entered promiscuous mode [ 37.052257][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.060722][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.069044][ T3317] bridge_slave_1: entered allmulticast mode [ 37.076366][ T3317] bridge_slave_1: entered promiscuous mode [ 37.112755][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.131520][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.139846][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.147416][ T3323] bridge_slave_0: entered allmulticast mode [ 37.154206][ T3323] bridge_slave_0: entered promiscuous mode [ 37.165986][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 37.176824][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.187657][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.204624][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.212439][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.220406][ T3323] bridge_slave_1: entered allmulticast mode [ 37.227510][ T3323] bridge_slave_1: entered promiscuous mode [ 37.238375][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.288851][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.296238][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.303709][ T3322] bridge_slave_0: entered allmulticast mode [ 37.311039][ T3322] bridge_slave_0: entered promiscuous mode [ 37.324630][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.335572][ T3317] team0: Port device team_slave_0 added [ 37.342984][ T3317] team0: Port device team_slave_1 added [ 37.349986][ T3318] team0: Port device team_slave_0 added [ 37.355901][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.363771][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.371875][ T3322] bridge_slave_1: entered allmulticast mode [ 37.379035][ T3322] bridge_slave_1: entered promiscuous mode [ 37.389385][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.405227][ T3318] team0: Port device team_slave_1 added [ 37.444762][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.452553][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.484245][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.506785][ T3323] team0: Port device team_slave_0 added [ 37.518998][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.527750][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.557124][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.569311][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.576907][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.605544][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.619435][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.630471][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.640730][ T3323] team0: Port device team_slave_1 added [ 37.659633][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.667501][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.710801][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.744053][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.751790][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.761289][ T3321] bridge_slave_0: entered allmulticast mode [ 37.769003][ T3321] bridge_slave_0: entered promiscuous mode [ 37.780103][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.788720][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.796423][ T3321] bridge_slave_1: entered allmulticast mode [ 37.804748][ T3321] bridge_slave_1: entered promiscuous mode [ 37.825082][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.832882][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.862085][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.891057][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.901843][ T3322] team0: Port device team_slave_0 added [ 37.908746][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.915900][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.944668][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.972321][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.989289][ T3322] team0: Port device team_slave_1 added [ 38.006964][ T3318] hsr_slave_0: entered promiscuous mode [ 38.014275][ T3318] hsr_slave_1: entered promiscuous mode [ 38.040767][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.047977][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.076394][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.089928][ T3317] hsr_slave_0: entered promiscuous mode [ 38.096449][ T3317] hsr_slave_1: entered promiscuous mode [ 38.102573][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.111476][ T3317] Cannot create hsr debugfs directory [ 38.119847][ T3321] team0: Port device team_slave_0 added [ 38.127554][ T3321] team0: Port device team_slave_1 added [ 38.142789][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.151938][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.182083][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.237879][ T3323] hsr_slave_0: entered promiscuous mode [ 38.245546][ T3323] hsr_slave_1: entered promiscuous mode [ 38.254820][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.266720][ T3323] Cannot create hsr debugfs directory [ 38.286752][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.294348][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.323610][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.347466][ T3322] hsr_slave_0: entered promiscuous mode [ 38.356211][ T3322] hsr_slave_1: entered promiscuous mode [ 38.364837][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.374214][ T3322] Cannot create hsr debugfs directory [ 38.385944][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.396414][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.448176][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.575090][ T3321] hsr_slave_0: entered promiscuous mode [ 38.581733][ T3321] hsr_slave_1: entered promiscuous mode [ 38.589017][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.597400][ T3321] Cannot create hsr debugfs directory [ 38.689236][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.707021][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.723506][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.743035][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.769756][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.780614][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.791709][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.809465][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.851117][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.863965][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.888197][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.913813][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.924129][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.937659][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.954698][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.967323][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.979019][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.993276][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.007888][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.018935][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.030489][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.046948][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.064708][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.072839][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.083142][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.091349][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.178142][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.214551][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.235825][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.247459][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.267514][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.283611][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.293326][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.301502][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.312651][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.320941][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.334194][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.361245][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.369677][ T2285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.389112][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.399474][ T2285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.414716][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.430699][ T2285] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.438090][ T2285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.453005][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.461160][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.472013][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.481042][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.494710][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.512073][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.524924][ T1737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.576913][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.589069][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.699694][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.739368][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.758090][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.798585][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.827650][ T3318] veth0_vlan: entered promiscuous mode [ 39.867867][ T3318] veth1_vlan: entered promiscuous mode [ 39.890698][ T3318] veth0_macvtap: entered promiscuous mode [ 39.907124][ T3318] veth1_macvtap: entered promiscuous mode [ 39.958458][ T3321] veth0_vlan: entered promiscuous mode [ 39.978700][ T3321] veth1_vlan: entered promiscuous mode [ 39.998671][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.015747][ T3323] veth0_vlan: entered promiscuous mode [ 40.022505][ T3317] veth0_vlan: entered promiscuous mode [ 40.033513][ T3321] veth0_macvtap: entered promiscuous mode [ 40.050162][ T3321] veth1_macvtap: entered promiscuous mode [ 40.057946][ T3322] veth0_vlan: entered promiscuous mode [ 40.065534][ T3323] veth1_vlan: entered promiscuous mode [ 40.075043][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.090906][ T3322] veth1_vlan: entered promiscuous mode [ 40.098145][ T3317] veth1_vlan: entered promiscuous mode [ 40.106564][ T3318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.115474][ T3318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.124460][ T3318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.134064][ T3318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.149891][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.160483][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.177986][ T3321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.187022][ T3321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.197342][ T3321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.208282][ T3321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.233420][ T3323] veth0_macvtap: entered promiscuous mode [ 40.256209][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.256226][ T29] audit: type=1400 audit(1748597684.566:81): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.RWbJlU/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.263984][ T3323] veth1_macvtap: entered promiscuous mode [ 40.308718][ T29] audit: type=1400 audit(1748597684.576:82): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.335614][ T29] audit: type=1400 audit(1748597684.576:83): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.7q0zgo/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.339040][ T3317] veth0_macvtap: entered promiscuous mode [ 40.364816][ T29] audit: type=1400 audit(1748597684.576:84): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.376631][ T3317] veth1_macvtap: entered promiscuous mode [ 40.394815][ T29] audit: type=1400 audit(1748597684.576:85): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.7q0zgo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.418081][ T3322] veth0_macvtap: entered promiscuous mode [ 40.429084][ T29] audit: type=1400 audit(1748597684.576:86): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.7q0zgo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.446996][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.464300][ T29] audit: type=1400 audit(1748597684.576:87): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.485511][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.492088][ T29] audit: type=1400 audit(1748597684.626:88): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.525366][ T3322] veth1_macvtap: entered promiscuous mode [ 40.534809][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.539824][ T29] audit: type=1400 audit(1748597684.626:89): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=4327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.563831][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.593912][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.606847][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.616073][ T29] audit: type=1400 audit(1748597684.906:90): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.620288][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.654985][ T3323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.665108][ T3323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.674971][ T3323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.685329][ T3323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.706763][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.716990][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.727837][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.737205][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.751942][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.762882][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.780176][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.792389][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.802892][ T3460] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 41.098241][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 41.109477][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 41.122213][ T3478] Zero length message leads to an empty skb [ 41.237337][ T3484] capability: warning: `syz.4.11' uses deprecated v2 capabilities in a way that may be insecure [ 41.347929][ T3495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16'. [ 41.553553][ T3517] loop4: detected capacity change from 0 to 512 [ 41.565540][ T3517] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.580976][ T3517] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.620151][ T3517] EXT4-fs (loop4): 1 truncate cleaned up [ 41.627275][ T3517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.647986][ T3517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.728786][ T3528] netlink: 96 bytes leftover after parsing attributes in process `syz.3.27'. [ 41.929048][ T3550] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 42.161891][ T3568] xt_hashlimit: max too large, truncated to 1048576 [ 42.236842][ T3575] process 'syz.0.45' launched './file0' with NULL argv: empty string added [ 42.594202][ T3596] loop1: detected capacity change from 0 to 164 [ 42.636623][ T3596] syz.1.55: attempt to access beyond end of device [ 42.636623][ T3596] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 42.656376][ T3596] syz.1.55: attempt to access beyond end of device [ 42.656376][ T3596] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.817520][ T3606] xt_connbytes: Forcing CT accounting to be enabled [ 42.838199][ T3606] Cannot find add_set index 0 as target [ 42.922716][ T3613] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.307843][ T3652] xt_hashlimit: max too large, truncated to 1048576 [ 43.460362][ T3669] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 43.472911][ T3670] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 43.868448][ T3698] mmap: syz.0.101 (3698) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.642634][ T3779] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 44.989573][ T3832] syzkaller0: entered promiscuous mode [ 44.995524][ T3832] syzkaller0: entered allmulticast mode [ 45.020123][ T3838] loop2: detected capacity change from 0 to 512 [ 45.090035][ T3838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.126640][ T3838] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.165531][ T3838] syz.2.133 (3838) used greatest stack depth: 10568 bytes left [ 45.220786][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.312803][ T3849] loop2: detected capacity change from 0 to 512 [ 45.347230][ T3849] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.355633][ T3849] EXT4-fs: Ignoring removed bh option [ 45.371146][ T3849] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.388358][ T3849] EXT4-fs (loop2): 1 truncate cleaned up [ 45.395050][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 45.395064][ T29] audit: type=1400 audit(1748597689.706:558): avc: denied { write } for pid=3850 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.438193][ T3849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.457070][ T29] audit: type=1400 audit(1748597689.776:559): avc: denied { ioctl } for pid=3850 comm="syz.1.137" path="socket:[4957]" dev="sockfs" ino=4957 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.506184][ T29] audit: type=1400 audit(1748597689.826:560): avc: denied { read append open } for pid=3847 comm="syz.2.134" path="/26/bus/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.601890][ T29] audit: type=1400 audit(1748597689.916:561): avc: denied { map } for pid=3847 comm="syz.2.134" path="/26/bus/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.626325][ T29] audit: type=1400 audit(1748597689.916:562): avc: denied { write } for pid=3847 comm="syz.2.134" path="/26/bus/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.660553][ T3859] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 45.672007][ T29] audit: type=1326 audit(1748597689.936:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc600e969 code=0x7ffc0000 [ 45.698453][ T29] audit: type=1326 audit(1748597689.936:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedc600e969 code=0x7ffc0000 [ 45.727573][ T29] audit: type=1326 audit(1748597689.936:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc600e969 code=0x7ffc0000 [ 45.754443][ T29] audit: type=1326 audit(1748597689.936:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fedc600e969 code=0x7ffc0000 [ 45.781176][ T29] audit: type=1326 audit(1748597689.936:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc600e969 code=0x7ffc0000 [ 45.808922][ T3395] IPVS: starting estimator thread 0... [ 45.868600][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 45.878059][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 45.889641][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 45.930902][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.946151][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 45.954356][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 45.959693][ T3863] IPVS: using max 2016 ests per chain, 100800 per kthread [ 45.962879][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 45.979798][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 45.989114][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 45.997857][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 46.007552][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 46.016685][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 46.025214][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 46.034698][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 46.043753][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 46.058100][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 46.066825][ T36] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 46.077342][ T36] hid-generic 0006:0000:0000.0001: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 46.118350][ T3871] random: crng reseeded on system resumption [ 46.127221][ T3872] fido_id[3872]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.668714][ T3900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 46.723681][ T3900] team0: Port device team_slave_0 removed [ 46.795172][ T3903] loop3: detected capacity change from 0 to 8192 [ 46.814687][ T3903] vfat: Unknown parameter 'ÿÿÿÿ³À¶Í닃¹¬HŠ!û´1ÇÉ`w á)¯ïea뀋-˜àsàøŒ_«uŪ][_Hq¢mÍÊ5W†)‘-3?b5e]ó°C"XGê •Ž\¸ZãÇH¹Pú•X017777777777777777777770xffffffffffffffff18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 46.906101][ T3909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 47.165183][ T3909] syz.2.160 (3909) used greatest stack depth: 10176 bytes left [ 47.173612][ T3921] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 47.405671][ T3942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 47.434758][ T3942] veth3: entered promiscuous mode [ 47.440620][ T3942] veth3: entered allmulticast mode [ 47.461117][ T3947] loop4: detected capacity change from 0 to 256 [ 47.477090][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 47.504241][ T3947] netlink: 'syz.4.178': attribute type 39 has an invalid length. [ 47.614669][ T3958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.184'. [ 47.641298][ T3958] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.651500][ T3958] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.798069][ T3969] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 47.799240][ T3970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.815818][ T3970] IPv6: NLM_F_CREATE should be set when creating new route [ 47.841438][ T3969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.934197][ T3974] bond1 (unregistering): Released all slaves [ 48.011917][ T3983] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.193'. [ 48.046127][ T3987] loop3: detected capacity change from 0 to 164 [ 48.055800][ T3978] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.193'. [ 48.085329][ T3987] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.138313][ T3987] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.162650][ T3996] syz_tun: entered allmulticast mode [ 48.169657][ T3996] syz_tun: left allmulticast mode [ 48.176329][ T3987] Symlink component flag not implemented [ 48.182515][ T3987] Symlink component flag not implemented [ 48.214701][ T3998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.203'. [ 48.225210][ T3987] Symlink component flag not implemented (7) [ 48.231706][ T3987] Symlink component flag not implemented (116) [ 49.548471][ T4018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 49.744688][ T4032] loop1: detected capacity change from 0 to 164 [ 49.796634][ T4032] syz.1.217: attempt to access beyond end of device [ 49.796634][ T4032] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 49.820458][ T4032] syz.1.217: attempt to access beyond end of device [ 49.820458][ T4032] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 49.927512][ T4048] netlink: 'syz.4.224': attribute type 1 has an invalid length. [ 49.988071][ T4051] loop1: detected capacity change from 0 to 164 [ 49.992550][ T4048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.021569][ T4051] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.057581][ T4052] bond1 (unregistering): Released all slaves [ 50.065442][ T4051] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.104100][ T4051] Symlink component flag not implemented [ 50.110742][ T4051] Symlink component flag not implemented [ 50.156173][ T4051] Symlink component flag not implemented (7) [ 50.162632][ T4051] Symlink component flag not implemented (116) [ 50.182153][ T4054] futex_wake_op: syz.3.226 tries to shift op by -1; fix this program [ 50.462770][ T4074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.235'. [ 50.540915][ T4079] loop0: detected capacity change from 0 to 256 [ 50.581555][ T4079] netlink: 'syz.0.236': attribute type 39 has an invalid length. [ 50.658510][ T4083] loop4: detected capacity change from 0 to 164 [ 50.693384][ T4085] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 50.705357][ T4083] syz.4.238: attempt to access beyond end of device [ 50.705357][ T4083] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 50.740468][ T4083] syz.4.238: attempt to access beyond end of device [ 50.740468][ T4083] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 50.767416][ T4085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.781761][ T4087] bond1 (unregistering): Released all slaves [ 50.858555][ T4089] loop4: detected capacity change from 0 to 164 [ 50.868627][ T4089] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.885509][ T4089] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.895666][ T4089] Symlink component flag not implemented [ 50.903010][ T4089] Symlink component flag not implemented [ 50.910647][ T4089] Symlink component flag not implemented (7) [ 50.918099][ T4089] Symlink component flag not implemented (116) [ 50.991124][ T4093] loop0: detected capacity change from 0 to 164 [ 51.036532][ T4093] syz.0.251: attempt to access beyond end of device [ 51.036532][ T4093] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 51.062106][ T4093] syz.0.251: attempt to access beyond end of device [ 51.062106][ T4093] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 51.114540][ T4098] futex_wake_op: syz.1.243 tries to shift op by -1; fix this program [ 51.205885][ T4104] loop2: detected capacity change from 0 to 164 [ 51.260425][ T4104] syz.2.256: attempt to access beyond end of device [ 51.260425][ T4104] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 51.303117][ T4104] syz.2.256: attempt to access beyond end of device [ 51.303117][ T4104] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 51.326648][ T4117] ======================================================= [ 51.326648][ T4117] WARNING: The mand mount option has been deprecated and [ 51.326648][ T4117] and is ignored by this kernel. Remove the mand [ 51.326648][ T4117] option from the mount to silence this warning. [ 51.326648][ T4117] ======================================================= [ 51.381132][ T4118] syz.1.249 uses obsolete (PF_INET,SOCK_PACKET) [ 51.393215][ T4115] syzkaller1: entered promiscuous mode [ 51.400617][ T4115] syzkaller1: entered allmulticast mode [ 51.463365][ T4122] team0: Port device team_slave_0 removed [ 51.569389][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 51.569409][ T29] audit: type=1326 audit(1748597695.886:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 51.619211][ T4136] hub 9-0:1.0: USB hub found [ 51.629966][ T4136] hub 9-0:1.0: 8 ports detected [ 51.670576][ T29] audit: type=1326 audit(1748597695.926:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 51.697061][ T29] audit: type=1326 audit(1748597695.926:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 51.725077][ T29] audit: type=1400 audit(1748597695.926:674): avc: denied { wake_alarm } for pid=4133 comm="syz.0.261" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.749457][ T29] audit: type=1326 audit(1748597695.926:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 51.776118][ T29] audit: type=1326 audit(1748597695.926:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 51.801151][ T29] audit: type=1326 audit(1748597695.926:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 51.802619][ T4140] syz_tun: entered allmulticast mode [ 51.826251][ T29] audit: type=1326 audit(1748597695.926:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 51.859301][ T4140] syz_tun: left allmulticast mode [ 51.860544][ T29] audit: type=1400 audit(1748597695.936:679): avc: denied { write } for pid=4134 comm="syz.4.260" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.894568][ T4142] loop4: detected capacity change from 0 to 512 [ 51.908560][ T4142] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.916155][ T4142] EXT4-fs: Ignoring removed bh option [ 51.932782][ T4142] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.028080][ T4142] EXT4-fs (loop4): 1 truncate cleaned up [ 52.035290][ T4142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.066614][ T29] audit: type=1400 audit(1748597696.366:680): avc: denied { read } for pid=4151 comm="syz.3.268" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.295983][ T4165] netlink: 'syz.0.273': attribute type 2 has an invalid length. [ 52.322399][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.338773][ T4167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4167 comm=syz.2.274 [ 52.462127][ T4175] loop0: detected capacity change from 0 to 2048 [ 52.496480][ T3701] loop0: p1 < > p4 [ 52.511530][ T3701] loop0: p4 size 8388608 extends beyond EOD, truncated [ 52.511763][ T4179] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 52.538401][ T4175] loop0: p1 < > p4 [ 52.549145][ T4179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.568131][ T4175] loop0: p4 size 8388608 extends beyond EOD, truncated [ 52.597485][ T4179] bond1 (unregistering): Released all slaves [ 52.629707][ T4183] syz.2.280 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.675228][ T3007] loop0: p1 < > p4 [ 52.684580][ T3007] loop0: p4 size 8388608 extends beyond EOD, truncated [ 52.762391][ T4192] loop1: detected capacity change from 0 to 256 [ 52.776576][ T3701] udevd[3701]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 52.790005][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.861446][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.873532][ T3701] udevd[3701]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 52.925624][ T4192] netlink: 'syz.1.282': attribute type 39 has an invalid length. [ 52.935952][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.950074][ T3701] udevd[3701]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 52.977471][ T4191] infiniband syz1: set active [ 52.982848][ T4191] infiniband syz1: added veth0_to_bridge [ 53.076768][ T4191] RDS/IB: syz1: added [ 53.097604][ T4191] smc: adding ib device syz1 with port count 1 [ 53.112228][ T4191] smc: ib device syz1 port 1 has pnetid [ 53.166225][ T4204] $Hÿ: renamed from bond0 (while UP) [ 53.216482][ T4204] $Hÿ: entered promiscuous mode [ 53.222220][ T4204] bond_slave_0: entered promiscuous mode [ 53.229157][ T4204] bond_slave_1: entered promiscuous mode [ 53.382823][ T4221] loop1: detected capacity change from 0 to 512 [ 53.399009][ T4222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.413302][ T4221] ext4: Unknown parameter 'permit_directio' [ 53.470156][ T4222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.601155][ T4222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.689587][ T4222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.764230][ T4222] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.790390][ T4222] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.810517][ T4222] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.841956][ T4222] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.021921][ T4240] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 54.040047][ T4242] vlan2: entered allmulticast mode [ 54.122090][ T4240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.182737][ T4246] bond1 (unregistering): Released all slaves [ 54.281974][ T4254] netlink: 'syz.1.308': attribute type 2 has an invalid length. [ 54.320041][ T4257] __nla_validate_parse: 3 callbacks suppressed [ 54.320062][ T4257] netlink: 344 bytes leftover after parsing attributes in process `syz.2.310'. [ 54.394212][ T4260] loop0: detected capacity change from 0 to 512 [ 54.441913][ T4260] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.450044][ T4260] EXT4-fs: Ignoring removed bh option [ 54.486003][ T4260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.517498][ T4260] EXT4-fs (loop0): 1 truncate cleaned up [ 54.529502][ T4260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.769182][ T4286] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 54.812676][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.904736][ T4286] bond0 (unregistering): Released all slaves [ 55.033769][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.074317][ T4299] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 55.474250][ T4321] loop3: detected capacity change from 0 to 512 [ 55.501203][ T4321] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.508589][ T4321] EXT4-fs: Ignoring removed bh option [ 55.536094][ T4321] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.581360][ T4321] EXT4-fs (loop3): 1 truncate cleaned up [ 55.599779][ T4321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.879380][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.930848][ T4337] netlink: 344 bytes leftover after parsing attributes in process `syz.3.347'. [ 55.966209][ T4339] xt_hashlimit: max too large, truncated to 1048576 [ 56.085199][ T4343] vlan2: entered allmulticast mode [ 56.091102][ T4343] vlan1: entered allmulticast mode [ 56.096713][ T4343] veth0_vlan: entered allmulticast mode [ 56.105839][ T4343] bridge0: port 3(vlan2) entered blocking state [ 56.112803][ T4343] bridge0: port 3(vlan2) entered disabled state [ 56.135363][ T4343] vlan2: entered promiscuous mode [ 56.141589][ T4343] vlan1: entered promiscuous mode [ 56.147588][ T4343] bridge0: port 3(vlan2) entered blocking state [ 56.155080][ T4343] bridge0: port 3(vlan2) entered forwarding state [ 56.298137][ T4358] loop1: detected capacity change from 0 to 512 [ 56.305160][ T4358] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.312402][ T4358] EXT4-fs: Ignoring removed bh option [ 56.356164][ T4358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.377630][ T4358] EXT4-fs (loop1): 1 truncate cleaned up [ 56.384631][ T4358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.594552][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.638870][ T4371] loop1: detected capacity change from 0 to 164 [ 56.745182][ T4373] wg2: entered promiscuous mode [ 56.750481][ T4373] wg2: entered allmulticast mode [ 56.831869][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 56.831887][ T29] audit: type=1326 audit(1748597701.146:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 56.889670][ T29] audit: type=1326 audit(1748597701.186:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 56.915478][ T29] audit: type=1326 audit(1748597701.186:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 56.922972][ T4379] vlan2: entered allmulticast mode [ 56.941523][ T29] audit: type=1326 audit(1748597701.186:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 56.947072][ T4379] vlan1: entered allmulticast mode [ 56.972638][ T29] audit: type=1326 audit(1748597701.186:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 56.978476][ T4379] veth0_vlan: entered allmulticast mode [ 57.003379][ T29] audit: type=1326 audit(1748597701.186:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 57.037636][ T29] audit: type=1326 audit(1748597701.186:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 57.055947][ T4379] bridge0: port 3(vlan2) entered blocking state [ 57.063946][ T29] audit: type=1326 audit(1748597701.186:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 57.070874][ T4379] bridge0: port 3(vlan2) entered disabled state [ 57.075276][ T4379] vlan2: entered promiscuous mode [ 57.096669][ T29] audit: type=1326 audit(1748597701.186:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 57.103852][ T4379] vlan1: entered promiscuous mode [ 57.108924][ T29] audit: type=1326 audit(1748597701.186:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 57.240168][ T4379] bridge0: port 3(vlan2) entered blocking state [ 57.247057][ T4379] bridge0: port 3(vlan2) entered forwarding state [ 57.925140][ T4429] wg2: entered promiscuous mode [ 57.932152][ T4429] wg2: entered allmulticast mode [ 59.110440][ T4473] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 59.118652][ T4473] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 59.477412][ T4507] vlan2: entered allmulticast mode [ 59.483351][ T4507] vlan1: entered allmulticast mode [ 59.489267][ T4507] veth0_vlan: entered allmulticast mode [ 59.497201][ T4507] bridge0: port 3(vlan2) entered blocking state [ 59.505062][ T4507] bridge0: port 3(vlan2) entered disabled state [ 59.514557][ T4507] vlan2: entered promiscuous mode [ 59.520013][ T4507] vlan1: entered promiscuous mode [ 59.872618][ T4517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 59.906743][ T4519] netlink: 'syz.1.412': attribute type 10 has an invalid length. [ 59.924419][ T4519] batman_adv: batadv0: Adding interface: team0 [ 59.931037][ T4519] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.960618][ T4519] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 60.007740][ T4521] bond1: entered promiscuous mode [ 60.014019][ T4521] bond1: entered allmulticast mode [ 60.033444][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 60.054571][ T4521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.063635][ T4525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.414'. [ 60.115173][ T4521] bond1 (unregistering): Released all slaves [ 60.183180][ T4525] vlan2: entered promiscuous mode [ 60.188545][ T4525] hsr0: entered promiscuous mode [ 60.300484][ T4549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.423'. [ 60.386290][ T4554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 60.402980][ T4557] netlink: 'syz.4.424': attribute type 10 has an invalid length. [ 60.438311][ T4557] batman_adv: batadv0: Adding interface: team0 [ 60.444982][ T4557] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.476161][ T4557] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 60.781327][ T4572] netlink: 'syz.3.428': attribute type 13 has an invalid length. [ 60.829957][ T4572] gretap0: refused to change device tx_queue_len [ 60.836417][ T4574] loop4: detected capacity change from 0 to 512 [ 60.837336][ T4572] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 60.847672][ T4574] EXT4-fs: Ignoring removed nobh option [ 60.878716][ T4574] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 60.898194][ T4574] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.429: attempt to clear invalid blocks 2 len 1 [ 60.918861][ T4574] EXT4-fs (loop4): Remounting filesystem read-only [ 60.927853][ T4574] EXT4-fs (loop4): 1 truncate cleaned up [ 60.935939][ T4574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.979493][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.133980][ C0] hrtimer: interrupt took 59981 ns [ 61.146908][ T4589] netlink: 'syz.2.437': attribute type 10 has an invalid length. [ 61.160964][ T4589] batman_adv: batadv0: Adding interface: team0 [ 61.168339][ T4589] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.195858][ T4589] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 61.601205][ T4607] geneve2: entered promiscuous mode [ 61.641065][ T4607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.832745][ T4611] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.898552][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 61.898571][ T29] audit: type=1400 audit(1748597706.216:808): avc: denied { cmd } for pid=4610 comm="syz.0.447" path="socket:[8251]" dev="sockfs" ino=8251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.000615][ T4619] syzkaller0: refused to change device tx_queue_len [ 62.096410][ T29] audit: type=1400 audit(1748597706.306:809): avc: denied { getopt } for pid=4620 comm="syz.1.450" lport=59205 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 62.122063][ T29] audit: type=1326 audit(1748597706.386:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 62.148808][ T29] audit: type=1326 audit(1748597706.386:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 62.175976][ T29] audit: type=1326 audit(1748597706.386:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 62.202648][ T29] audit: type=1326 audit(1748597706.386:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 62.228703][ T29] audit: type=1326 audit(1748597706.386:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 62.254990][ T29] audit: type=1326 audit(1748597706.386:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 62.282382][ T29] audit: type=1326 audit(1748597706.386:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 62.311617][ T29] audit: type=1326 audit(1748597706.386:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a30fe969 code=0x7ffc0000 [ 63.693884][ T4660] loop0: detected capacity change from 0 to 512 [ 63.722527][ T4660] EXT4-fs: Ignoring removed nobh option [ 63.750443][ T4660] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 63.768179][ T4660] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.463: attempt to clear invalid blocks 2 len 1 [ 63.800910][ T4664] loop1: detected capacity change from 0 to 1024 [ 63.816889][ T4660] EXT4-fs (loop0): Remounting filesystem read-only [ 63.825830][ T4660] EXT4-fs (loop0): 1 truncate cleaned up [ 63.832932][ T4660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.864241][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.919086][ T4664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.012143][ T4664] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 64.029951][ T4670] bond1: entered promiscuous mode [ 64.035324][ T4670] bond1: entered allmulticast mode [ 64.076444][ T4664] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 51 with max blocks 1 with error 28 [ 64.090029][ T4664] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.090029][ T4664] [ 64.097290][ T4670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.100417][ T4664] EXT4-fs (loop1): Total free blocks count 0 [ 64.114175][ T4664] EXT4-fs (loop1): Free/Dirty block details [ 64.120848][ T4664] EXT4-fs (loop1): free_blocks=68451041280 [ 64.126876][ T4664] EXT4-fs (loop1): dirty_blocks=32 [ 64.132578][ T4664] EXT4-fs (loop1): Block reservation details [ 64.139194][ T4664] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 64.148309][ T4674] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28 [ 64.166488][ T4670] bond1 (unregistering): Released all slaves [ 64.184562][ T4664] syz.1.466 (4664) used greatest stack depth: 9880 bytes left [ 64.391418][ T4696] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 64.513941][ T4707] loop0: detected capacity change from 0 to 164 [ 64.548114][ T4707] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 64.588357][ T4707] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 64.616914][ T4714] loop1: detected capacity change from 0 to 512 [ 64.629019][ T4707] Symlink component flag not implemented [ 64.635986][ T4707] Symlink component flag not implemented [ 64.636172][ T4714] EXT4-fs: Ignoring removed nobh option [ 64.676209][ T4707] Symlink component flag not implemented (7) [ 64.689978][ T4707] Symlink component flag not implemented (116) [ 64.706611][ T4714] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 64.729852][ T4714] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.499: attempt to clear invalid blocks 2 len 1 [ 64.746301][ T4714] EXT4-fs (loop1): Remounting filesystem read-only [ 64.758956][ T4714] EXT4-fs (loop1): 1 truncate cleaned up [ 64.765487][ T4714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.910008][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.481211][ T4755] loop3: detected capacity change from 0 to 512 [ 65.489811][ T4755] EXT4-fs: Ignoring removed nobh option [ 65.498109][ T4753] loop4: detected capacity change from 0 to 164 [ 65.511730][ T4755] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 65.531335][ T4753] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.540652][ T4755] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.507: attempt to clear invalid blocks 2 len 1 [ 65.569684][ T4753] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.595649][ T4755] EXT4-fs (loop3): Remounting filesystem read-only [ 65.610447][ T4755] EXT4-fs (loop3): 1 truncate cleaned up [ 65.626384][ T4753] Symlink component flag not implemented [ 65.633027][ T4753] Symlink component flag not implemented [ 65.634529][ T4755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.654265][ T4753] Symlink component flag not implemented (7) [ 65.661153][ T4753] Symlink component flag not implemented (116) [ 65.720789][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.858928][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 65.883579][ T4778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.517'. [ 65.927102][ T4784] ipip0: entered promiscuous mode [ 65.961412][ T4789] loop3: detected capacity change from 0 to 164 [ 65.990103][ T4789] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.007452][ T4789] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.036694][ T4789] Symlink component flag not implemented [ 66.042768][ T4789] Symlink component flag not implemented [ 66.076151][ T4789] Symlink component flag not implemented (7) [ 66.082584][ T4789] Symlink component flag not implemented (116) [ 66.228379][ T4798] loop3: detected capacity change from 0 to 164 [ 66.256940][ T4798] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.278821][ T4798] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.315502][ T4798] Symlink component flag not implemented [ 66.321966][ T4798] Symlink component flag not implemented [ 66.348570][ T4801] loop0: detected capacity change from 0 to 1024 [ 66.377591][ T4798] Symlink component flag not implemented (7) [ 66.385773][ T4798] Symlink component flag not implemented (116) [ 66.427162][ T4801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.488228][ T4810] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 66.497259][ T4810] netlink: 92 bytes leftover after parsing attributes in process `syz.3.528'. [ 66.508289][ T4810] NCSI netlink: No device for ifindex 540032357 [ 66.536708][ T4801] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.573697][ T4801] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 51 with max blocks 1 with error 28 [ 66.589862][ T4801] EXT4-fs (loop0): This should not happen!! Data will be lost [ 66.589862][ T4801] [ 66.601913][ T4801] EXT4-fs (loop0): Total free blocks count 0 [ 66.608797][ T4801] EXT4-fs (loop0): Free/Dirty block details [ 66.615802][ T4801] EXT4-fs (loop0): free_blocks=68451041280 [ 66.622043][ T4801] EXT4-fs (loop0): dirty_blocks=32 [ 66.624889][ T4819] loop2: detected capacity change from 0 to 256 [ 66.627690][ T4801] EXT4-fs (loop0): Block reservation details [ 66.627707][ T4801] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 66.656137][ T4820] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28 [ 66.776402][ T4826] loop0: detected capacity change from 0 to 512 [ 66.817028][ T4826] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 66.837193][ T4826] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.534: invalid indirect mapped block 2683928664 (level 1) [ 66.864259][ T4826] EXT4-fs (loop0): Remounting filesystem read-only [ 66.876396][ T4826] EXT4-fs (loop0): 1 truncate cleaned up [ 66.892153][ T4826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.941379][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 66.941397][ T29] audit: type=1326 audit(1748597711.256:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbb769d2d0 code=0x7ffc0000 [ 67.000730][ T29] audit: type=1326 audit(1748597711.296:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcbb769d6b7 code=0x7ffc0000 [ 67.028088][ T29] audit: type=1326 audit(1748597711.296:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbb769d2d0 code=0x7ffc0000 [ 67.055054][ T29] audit: type=1326 audit(1748597711.296:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 67.080777][ T29] audit: type=1326 audit(1748597711.296:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 67.106996][ T29] audit: type=1326 audit(1748597711.306:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 67.133926][ T29] audit: type=1326 audit(1748597711.306:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 67.161140][ T29] audit: type=1326 audit(1748597711.306:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 67.185355][ T29] audit: type=1326 audit(1748597711.316:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 67.213290][ T29] audit: type=1326 audit(1748597711.316:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb769e969 code=0x7ffc0000 [ 67.247295][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.487765][ T4847] loop3: detected capacity change from 0 to 1024 [ 67.550249][ T4847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.610623][ T4853] loop0: detected capacity change from 0 to 1024 [ 67.623771][ T4853] EXT4-fs (loop0): filesystem is read-only [ 67.662989][ T4847] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 67.691804][ T4847] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 51 with max blocks 1 with error 28 [ 67.706713][ T4847] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.706713][ T4847] [ 67.717159][ T4847] EXT4-fs (loop3): Total free blocks count 0 [ 67.724246][ T4847] EXT4-fs (loop3): Free/Dirty block details [ 67.730764][ T4847] EXT4-fs (loop3): free_blocks=68451041280 [ 67.738568][ T4847] EXT4-fs (loop3): dirty_blocks=32 [ 67.743751][ T4847] EXT4-fs (loop3): Block reservation details [ 67.752971][ T4847] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 67.787559][ T4857] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28 [ 67.869220][ T4861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 67.985567][ T4876] netlink: 'syz.0.558': attribute type 1 has an invalid length. [ 67.996061][ T4876] netlink: 92 bytes leftover after parsing attributes in process `syz.0.558'. [ 68.008135][ T4876] NCSI netlink: No device for ifindex 540032357 [ 68.293281][ T4904] loop2: detected capacity change from 0 to 1024 [ 68.301774][ T4904] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.314010][ T4904] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.343297][ T4904] JBD2: no valid journal superblock found [ 68.350219][ T4904] EXT4-fs (loop2): Could not load journal inode [ 68.370947][ T4904] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 68.468087][ T4915] netlink: 'syz.0.577': attribute type 13 has an invalid length. [ 68.553643][ T4915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.720153][ T4938] tipc: Started in network mode [ 68.726135][ T4938] tipc: Node identity ac14140f, cluster identity 4711 [ 68.734233][ T4938] tipc: New replicast peer: 10.1.1.2 [ 68.740354][ T4938] tipc: Enabled bearer , priority 10 [ 69.114849][ T4964] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 69.166747][ T4964] bond1: (slave gretap1): making interface the new active one [ 69.183564][ T4964] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 69.322990][ T4977] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 69.439800][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 69.459254][ T4990] bond1: entered promiscuous mode [ 69.465687][ T4990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.559289][ T5005] sch_fq: defrate 0 ignored. [ 69.585387][ T5009] xt_hashlimit: max too large, truncated to 1048576 [ 69.587389][ T5012] unsupported nla_type 52263 [ 69.623470][ T5015] loop1: detected capacity change from 0 to 1024 [ 69.646478][ T5015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.688953][ T5015] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 69.716156][ T5015] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 69.729535][ T5015] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.729535][ T5015] [ 69.740369][ T5015] EXT4-fs (loop1): Total free blocks count 0 [ 69.746803][ T5015] EXT4-fs (loop1): Free/Dirty block details [ 69.754032][ T5015] EXT4-fs (loop1): free_blocks=68451041280 [ 69.760244][ T5015] EXT4-fs (loop1): dirty_blocks=16 [ 69.766144][ T5015] EXT4-fs (loop1): Block reservation details [ 69.772853][ T5015] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 69.846354][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.856787][ T3394] tipc: Node number set to 2886997007 [ 69.865505][ T5038] vlan3: entered allmulticast mode [ 69.872256][ T5038] bond0: entered allmulticast mode [ 69.878166][ T5038] bond_slave_0: entered allmulticast mode [ 69.884534][ T5038] bond_slave_1: entered allmulticast mode [ 69.924866][ T5046] netlink: 'syz.3.630': attribute type 13 has an invalid length. [ 70.026969][ T5057] xt_hashlimit: max too large, truncated to 1048576 [ 70.037499][ T5046] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 70.071437][ T5046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.179178][ T5063] netlink: 'syz.4.638': attribute type 3 has an invalid length. [ 70.208952][ T5065] loop3: detected capacity change from 0 to 128 [ 70.224215][ T5065] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.238605][ T5065] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.275912][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.448933][ T5100] netlink: 'syz.3.653': attribute type 3 has an invalid length. [ 70.719480][ T5111] SELinux: Context Ü is not valid (left unmapped). [ 70.730962][ T5132] vlan2: entered allmulticast mode [ 70.736816][ T5132] $Hÿ: entered allmulticast mode [ 70.741325][ T5130] loop0: detected capacity change from 0 to 512 [ 70.742668][ T5132] bond_slave_0: entered allmulticast mode [ 70.742685][ T5132] bond_slave_1: entered allmulticast mode [ 70.764230][ T5130] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.780126][ T5130] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.793482][ T5130] EXT4-fs (loop0): 1 truncate cleaned up [ 70.803781][ T5130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.862724][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.882839][ T5143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 70.933977][ T5143] bond1: entered promiscuous mode [ 70.941726][ T5143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.961046][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 70.982072][ T5158] loop4: detected capacity change from 0 to 128 [ 70.992033][ T5158] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.008039][ T5158] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.026644][ T5162] loop3: detected capacity change from 0 to 512 [ 71.055247][ T5162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.070652][ T5162] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.122456][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.132057][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.527878][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 71.552173][ T5195] bond0: entered promiscuous mode [ 71.560065][ T5195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.581987][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 71.604065][ T5200] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 71.666996][ T5200] bond2: (slave gretap1): making interface the new active one [ 71.675374][ T5200] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 71.740214][ T5209] loop1: detected capacity change from 0 to 128 [ 71.753866][ T5209] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.768723][ T5209] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.832039][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.981073][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 71.981090][ T29] audit: type=1400 audit(1748597716.296:1027): avc: denied { name_bind } for pid=5231 comm="syz.2.710" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 72.067627][ T5235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.711'. [ 72.387163][ T5246] loop2: detected capacity change from 0 to 128 [ 72.396914][ T5246] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.428053][ T5246] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.436119][ T29] audit: type=1400 audit(1748597716.736:1028): avc: denied { create } for pid=5243 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.467537][ T29] audit: type=1400 audit(1748597716.736:1029): avc: denied { bind } for pid=5243 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.593609][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.620252][ T29] audit: type=1400 audit(1748597716.926:1030): avc: denied { execute } for pid=5248 comm="syz.3.716" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 72.695263][ T5257] uprobe: syz.3.721:5257 failed to unregister, leaking uprobe [ 72.788234][ T5265] loop0: detected capacity change from 0 to 1024 [ 72.806321][ T5265] EXT4-fs: Ignoring removed bh option [ 72.812863][ T5265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.847829][ T5265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.883263][ T29] audit: type=1400 audit(1748597717.196:1031): avc: denied { ioctl } for pid=5263 comm="syz.0.723" path="/140/bus/bus" dev="loop0" ino=18 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.227341][ T29] audit: type=1400 audit(1748597717.546:1032): avc: denied { write } for pid=5294 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.337848][ T29] audit: type=1326 audit(1748597717.646:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011120e969 code=0x7ffc0000 [ 73.362588][ T29] audit: type=1326 audit(1748597717.646:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011120e969 code=0x7ffc0000 [ 73.388079][ T29] audit: type=1326 audit(1748597717.656:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f011120e969 code=0x7ffc0000 [ 73.412044][ T29] audit: type=1326 audit(1748597717.656:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011120e969 code=0x7ffc0000 [ 73.505257][ T5306] loop3: detected capacity change from 0 to 512 [ 73.607910][ T5306] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.724087][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.773723][ T5306] EXT4-fs (loop3): mount failed [ 73.864999][ T5321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 74.012519][ T5344] @ÿ: renamed from bond_slave_0 (while UP) [ 74.457573][ T5376] loop0: detected capacity change from 0 to 2048 [ 74.500653][ T5376] Alternate GPT is invalid, using primary GPT. [ 74.507789][ T5376] loop0: p2 p3 p7 [ 74.961810][ T5399] loop2: detected capacity change from 0 to 512 [ 74.977929][ T5399] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.996692][ T5399] EXT4-fs (loop2): mount failed [ 75.380948][ T5436] loop1: detected capacity change from 0 to 512 [ 75.398701][ T5435] netlink: 'syz.3.791': attribute type 10 has an invalid length. [ 75.420711][ T5435] veth0_vlan: entered allmulticast mode [ 75.431837][ T5436] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.456814][ T5435] veth0_vlan: left promiscuous mode [ 75.463939][ T5435] veth0_vlan: entered promiscuous mode [ 75.473106][ T5435] team0: Device veth0_vlan failed to register rx_handler [ 75.473221][ T5436] EXT4-fs (loop1): mount failed [ 75.592598][ T5446] loop3: detected capacity change from 0 to 2048 [ 75.855256][ T5446] Alternate GPT is invalid, using primary GPT. [ 75.862450][ T5446] loop3: p2 p3 p7 [ 76.114332][ T5474] loop4: detected capacity change from 0 to 512 [ 76.218508][ T5474] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.278552][ T5474] EXT4-fs (loop4): mount failed [ 76.486918][ T5497] pim6reg1: entered promiscuous mode [ 76.493171][ T5497] pim6reg1: entered allmulticast mode [ 77.105786][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 77.105804][ T29] audit: type=1326 audit(1748597721.416:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.177763][ T29] audit: type=1326 audit(1748597721.416:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.202383][ T29] audit: type=1326 audit(1748597721.426:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.227302][ T29] audit: type=1326 audit(1748597721.436:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.252441][ T29] audit: type=1326 audit(1748597721.436:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.277071][ T29] audit: type=1326 audit(1748597721.436:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.281309][ T5525] loop2: detected capacity change from 0 to 1024 [ 77.302390][ T29] audit: type=1326 audit(1748597721.436:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.334242][ T29] audit: type=1326 audit(1748597721.436:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.359232][ T29] audit: type=1326 audit(1748597721.436:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.383601][ T29] audit: type=1326 audit(1748597721.436:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641070e969 code=0x7ffc0000 [ 77.394795][ T5525] EXT4-fs: Ignoring removed bh option [ 77.415249][ T5525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.460907][ T5525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.777880][ T3759] ================================================================== [ 77.786470][ T3759] BUG: KCSAN: data-race in copy_page_from_iter_atomic / copy_page_from_iter_atomic [ 77.797474][ T3759] [ 77.799898][ T3759] write to 0xffff8881226e23c6 of 2 bytes by task 5525 on cpu 0: [ 77.808070][ T3759] copy_page_from_iter_atomic+0x7af/0x1060 [ 77.814598][ T3759] generic_perform_write+0x2c2/0x490 [ 77.820252][ T3759] ext4_buffered_write_iter+0x1ee/0x3c0 [ 77.826178][ T3759] ext4_file_write_iter+0x383/0xf00 [ 77.832385][ T3759] iter_file_splice_write+0x5f2/0x970 [ 77.838282][ T3759] direct_splice_actor+0x153/0x2a0 [ 77.844136][ T3759] splice_direct_to_actor+0x30f/0x680 [ 77.850593][ T3759] do_splice_direct+0xda/0x150 [ 77.855584][ T3759] do_sendfile+0x380/0x650 [ 77.860493][ T3759] __x64_sys_sendfile64+0x105/0x150 [ 77.865985][ T3759] x64_sys_call+0xb39/0x2fb0 [ 77.871177][ T3759] do_syscall_64+0xd2/0x200 [ 77.875913][ T3759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.882437][ T3759] [ 77.886022][ T3759] read to 0xffff8881226e2000 of 1024 bytes by task 3759 on cpu 1: [ 77.895235][ T3759] copy_page_from_iter_atomic+0x7af/0x1060 [ 77.901794][ T3759] generic_perform_write+0x2c2/0x490 [ 77.908198][ T3759] shmem_file_write_iter+0xc5/0xf0 [ 77.913885][ T3759] lo_rw_aio+0x5f7/0x7c0 [ 77.918190][ T3759] loop_process_work+0x52d/0xa60 [ 77.923558][ T3759] loop_workfn+0x31/0x40 [ 77.928051][ T3759] process_scheduled_works+0x4ce/0x9d0 [ 77.934347][ T3759] worker_thread+0x582/0x770 [ 77.939779][ T3759] kthread+0x486/0x510 [ 77.944133][ T3759] ret_from_fork+0xda/0x150 [ 77.949089][ T3759] ret_from_fork_asm+0x1a/0x30 [ 77.954911][ T3759] [ 77.957245][ T3759] Reported by Kernel Concurrency Sanitizer on: [ 77.964343][ T3759] CPU: 1 UID: 0 PID: 3759 Comm: kworker/u8:13 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 77.979348][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.992025][ T3759] Workqueue: loop2 loop_workfn [ 77.997739][ T3759] ================================================================== [ 78.184322][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.